ORDER 2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER 2.exe
Size

817KB
MD5

52d4a804964ce4785c619b45df0af231
SHA1

c892eb23cf5a5d4bcbe9eb326f0573dd946a4c52
SHA256

fac6a7623bd40a11274201b5ea609d276e8fd43d82eff03e3136997dbe54c19e
SHA512

249baddd9d9667ac46efffb7f57ed1320908fc61a343e32a726afee23bb4d7bea9079ae29577d7c9d6f041201ffd484d279e468c07f8729dd196a3b07546df79
SSDEEP

12288:s87XJlgnBP1q4jyEzmXO2x8IICMXAFoBZ39woUa2Dg1Pjqn0GW:RZGnBPIfE6XO2x8nXAFoDyoUawgbq0

Score

N/A

Malware Config

Signatures

Files

ORDER 2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 797KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ